[MacPorts] #63563: base and buildbots: certificate issues

[MacPorts]

#63563: base and buildbots: certificate issues
----------------------+-----------------------------
  Reporter:  mascguy  |      Owner:  (none)
      Type:  defect   |     Status:  new
  Priority:  High     |  Milestone:
 Component:  base     |    Version:
Resolution:           |   Keywords:  certificate ssl
      Port:           |
----------------------+-----------------------------
Description changed by mascguy:

Old description:

> It looks like we're experiencing certificate issues, both on the
> buildbots, as well as locally. It's not clear whether this is related to
> the certificate authorities, our own certs, or something else.
>
> On multiple buildbots, I'm seeing different variations of certificate
> validation errors. And this is occurring across multiple mirrors; both
> our own, as well as those from 3rd-parties:
>
> https://build.macports.org/builders/ports-10.10_x86_64-builder/builds/156470/steps
> /install-port/logs/stdio
>
> ```
> --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
> https://distfiles.macports.org/rrdtool
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
> Current
>                                  Dload  Upload   Total   Spent    Left
> Speed
>
>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
> 0
> DEBUG: Fetching distfile failed: SSL certificate problem: Invalid
> certificate chain
> ```
>
> https://build.macports.org/builders/ports-10.6_x86_64-builder/builds/74262/steps
> /install-port/logs/stdio
>
> ```
> --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
> http://oss.oetiker.ch/rrdtool/pub/
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
> Current
>                                  Dload  Upload   Total   Spent    Left
> Speed
>
>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
> 0
> DEBUG: Fetching distfile failed: error:1407742E:SSL
> routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
> ```
>
> https://build.macports.org/builders/ports-10.13_x86_64-builder/builds/124365/steps
> /install-port/logs/stdio
>
> ```
> --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
> http://oss.oetiker.ch/rrdtool/pub/
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
> Current
>                                  Dload  Upload   Total   Spent    Left
> Speed
>
>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
> 0
> DEBUG: Fetching distfile failed: SSL certificate problem: certificate has
> expired
> ```
>
> These appear to be sporadic, as they aren't occurring across-the-board.
>
> In addition, I'm also seeing certificate errors locally, though those are
> also sporadic.

New description:

 It looks like we're experiencing certificate issues, both on the
 buildbots, as well as locally. It's not clear whether this is related to
 the certificate authorities, our own certs, or something else.

 On multiple buildbots, I'm seeing different variations of certificate
 validation errors. And this is occurring across multiple mirrors; both our
 own, as well as those from 3rd-parties:

 https://build.macports.org/builders/ports-10.10_x86_64-builder/builds/156470/steps
 /install-port/logs/stdio

 {{{
 --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
 https://distfiles.macports.org/rrdtool
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
 Current
                                  Dload  Upload   Total   Spent    Left
 Speed

   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
 0
 DEBUG: Fetching distfile failed: SSL certificate problem: Invalid
 certificate chain
 }}}

 https://build.macports.org/builders/ports-10.6_x86_64-builder/builds/74262/steps
 /install-port/logs/stdio

 {{{
 --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
 http://oss.oetiker.ch/rrdtool/pub/
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
 Current
                                  Dload  Upload   Total   Spent    Left
 Speed

   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
 0
 DEBUG: Fetching distfile failed: error:1407742E:SSL
 routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
 }}}

 https://build.macports.org/builders/ports-10.13_x86_64-builder/builds/124365/steps
 /install-port/logs/stdio

 {{{
 --->  Attempting to fetch rrdtool-1.7.2.tar.gz from
 http://oss.oetiker.ch/rrdtool/pub/
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
 Current
                                  Dload  Upload   Total   Spent    Left
 Speed

   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
 0
 DEBUG: Fetching distfile failed: SSL certificate problem: certificate has
 expired
 }}}

 These appear to be sporadic, as they aren't occurring across-the-board.

 In addition, I'm also seeing certificate errors locally, though those are
 also sporadic.

--

-- 
Ticket URL: <https://trac.macports.org/ticket/63563#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS